Valley Oaks Health reported a data breach to the Attorney General of Massachusetts on March 18, 2024, after an unauthorized party accessed their computer network. The breach compromised sensitive information, including names, Social Security numbers, medical treatment details, and more.
The incident’s cause is still under investigation, but it’s believed that an unauthorized party gained access to Valley Oaks’ network between June 8, 2023, and June 13, 2023. Cybersecurity experts were brought in to assist with the investigation.
Valley Oaks confirmed that certain patient information was accessed during the breach period. After reviewing compromised files, they identified affected individuals and sent out data breach notification letters detailing the leaked information.
Established in 1938, Valley Oaks Health is a healthcare provider based in Lafayette, Indiana, offering mental health, addiction treatment, and primary care services across nine Indiana counties. With over 500 employees and multiple locations, the organization generates approximately $23 million in annual revenue.